{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:7C4GQCAPLNYQWV42V5G32ZK7LN","short_pith_number":"pith:7C4GQCAP","canonical_record":{"source":{"id":"2111.13844","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-27T08:15:44Z","cross_cats_sorted":[],"title_canon_sha256":"719e23d91d31933f8da6943eebc269a4aa77ce8cfbc0d859c63c447551498a5b","abstract_canon_sha256":"3351d5ff0f9380049d86ad6bce302cd4dd1dc5793cd2b921e4dfb4d1d63bd162"},"schema_version":"1.0"},"canonical_sha256":"f8b868080f5b710b579aaf4dbd655f5b694e6626323e5a97ec45ad3faa41d62e","source":{"kind":"arxiv","id":"2111.13844","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.13844","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"arxiv_version","alias_value":"2111.13844v4","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.13844","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"pith_short_12","alias_value":"7C4GQCAPLNYQ","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"pith_short_16","alias_value":"7C4GQCAPLNYQWV42","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"pith_short_8","alias_value":"7C4GQCAP","created_at":"2026-07-05T05:01:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:7C4GQCAPLNYQWV42V5G32ZK7LN","target":"record","payload":{"canonical_record":{"source":{"id":"2111.13844","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-27T08:15:44Z","cross_cats_sorted":[],"title_canon_sha256":"719e23d91d31933f8da6943eebc269a4aa77ce8cfbc0d859c63c447551498a5b","abstract_canon_sha256":"3351d5ff0f9380049d86ad6bce302cd4dd1dc5793cd2b921e4dfb4d1d63bd162"},"schema_version":"1.0"},"canonical_sha256":"f8b868080f5b710b579aaf4dbd655f5b694e6626323e5a97ec45ad3faa41d62e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:01:36.734431Z","signature_b64":"oA9Cl14AuXVv/qydWXM4QYI+Ey3SQrP9Tp2yXdUoHWhax99DMN5hDbCFtJiCv5VWFuOZObJsmzQJfm2wWns8Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f8b868080f5b710b579aaf4dbd655f5b694e6626323e5a97ec45ad3faa41d62e","last_reissued_at":"2026-07-05T05:01:36.734012Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:01:36.734012Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.13844","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:01:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j7II7EzYvLp7+x3fRSHOXIkOqjh66jH4BlcqnT8UTv8cJV7YdZFkM517UZxv1CXMSWYvUP84FyorPQPai7m5AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T01:23:28.221683Z"},"content_sha256":"fadd039a3b15921136ea903e002be4f27adc03d4061262df1f5f11d8b3789de4","schema_version":"1.0","event_id":"sha256:fadd039a3b15921136ea903e002be4f27adc03d4061262df1f5f11d8b3789de4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:7C4GQCAPLNYQWV42V5G32ZK7LN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jie Zhang, Shiguang Shan, Zheng Yuan","submitted_at":"2021-11-27T08:15:44Z","abstract_excerpt":"Adversarial attacks provide a good way to study the robustness of deep learning models. One category of methods in transfer-based black-box attack utilizes several image transformation operations to improve the transferability of adversarial examples, which is effective, but fails to take the specific characteristic of the input image into consideration. In this work, we propose a novel architecture, called Adaptive Image Transformation Learner (AITL), which incorporates different image transformation operations into a unified framework to further improve the transferability of adversarial exa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.13844","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.13844/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:01:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4NVicNbxPDyVFRchJ8/bEqYOrm3Pq/5zET3buqMr5n6vMWFlvf+ub9fUFAI4cSedXDv7xhGlq0ISYRqsibmPDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T01:23:28.222201Z"},"content_sha256":"aaa4e2078f9dc3c11f21cbb0e80efec0a2da55aa7ad9cbb99220508497d97bfc","schema_version":"1.0","event_id":"sha256:aaa4e2078f9dc3c11f21cbb0e80efec0a2da55aa7ad9cbb99220508497d97bfc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7C4GQCAPLNYQWV42V5G32ZK7LN/bundle.json","state_url":"https://pith.science/pith/7C4GQCAPLNYQWV42V5G32ZK7LN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7C4GQCAPLNYQWV42V5G32ZK7LN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T01:23:28Z","links":{"resolver":"https://pith.science/pith/7C4GQCAPLNYQWV42V5G32ZK7LN","bundle":"https://pith.science/pith/7C4GQCAPLNYQWV42V5G32ZK7LN/bundle.json","state":"https://pith.science/pith/7C4GQCAPLNYQWV42V5G32ZK7LN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7C4GQCAPLNYQWV42V5G32ZK7LN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:7C4GQCAPLNYQWV42V5G32ZK7LN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3351d5ff0f9380049d86ad6bce302cd4dd1dc5793cd2b921e4dfb4d1d63bd162","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-27T08:15:44Z","title_canon_sha256":"719e23d91d31933f8da6943eebc269a4aa77ce8cfbc0d859c63c447551498a5b"},"schema_version":"1.0","source":{"id":"2111.13844","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.13844","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"arxiv_version","alias_value":"2111.13844v4","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.13844","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"pith_short_12","alias_value":"7C4GQCAPLNYQ","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"pith_short_16","alias_value":"7C4GQCAPLNYQWV42","created_at":"2026-07-05T05:01:36Z"},{"alias_kind":"pith_short_8","alias_value":"7C4GQCAP","created_at":"2026-07-05T05:01:36Z"}],"graph_snapshots":[{"event_id":"sha256:aaa4e2078f9dc3c11f21cbb0e80efec0a2da55aa7ad9cbb99220508497d97bfc","target":"graph","created_at":"2026-07-05T05:01:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.13844/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks provide a good way to study the robustness of deep learning models. One category of methods in transfer-based black-box attack utilizes several image transformation operations to improve the transferability of adversarial examples, which is effective, but fails to take the specific characteristic of the input image into consideration. In this work, we propose a novel architecture, called Adaptive Image Transformation Learner (AITL), which incorporates different image transformation operations into a unified framework to further improve the transferability of adversarial exa","authors_text":"Jie Zhang, Shiguang Shan, Zheng Yuan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-27T08:15:44Z","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.13844","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fadd039a3b15921136ea903e002be4f27adc03d4061262df1f5f11d8b3789de4","target":"record","created_at":"2026-07-05T05:01:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3351d5ff0f9380049d86ad6bce302cd4dd1dc5793cd2b921e4dfb4d1d63bd162","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-27T08:15:44Z","title_canon_sha256":"719e23d91d31933f8da6943eebc269a4aa77ce8cfbc0d859c63c447551498a5b"},"schema_version":"1.0","source":{"id":"2111.13844","kind":"arxiv","version":4}},"canonical_sha256":"f8b868080f5b710b579aaf4dbd655f5b694e6626323e5a97ec45ad3faa41d62e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f8b868080f5b710b579aaf4dbd655f5b694e6626323e5a97ec45ad3faa41d62e","first_computed_at":"2026-07-05T05:01:36.734012Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:01:36.734012Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oA9Cl14AuXVv/qydWXM4QYI+Ey3SQrP9Tp2yXdUoHWhax99DMN5hDbCFtJiCv5VWFuOZObJsmzQJfm2wWns8Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:01:36.734431Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.13844","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fadd039a3b15921136ea903e002be4f27adc03d4061262df1f5f11d8b3789de4","sha256:aaa4e2078f9dc3c11f21cbb0e80efec0a2da55aa7ad9cbb99220508497d97bfc"],"state_sha256":"ed56ed25320e06ff0d5df107ee154d4d105e6fe71af3e904f99da7c6df8e0235"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"plIBvNd7ZOWHKSYD51Axnot8aelR0USUb2uoCa5R+oGhUer2gXf6+dWPWDC9aa11AKV+Yd0btwXVScI9m8oFAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T01:23:28.225908Z","bundle_sha256":"9f807bc4001daa22af9171466a1b1c836fe72f7f4f4ad4f93c0b23878e709255"}}